This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft File: LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft (raw, json) Hash identifier: 8xJb2M8qF5nMGhhCk+3BL2ur2ZHdxlYo6IKLhCknmd0= Subject key identifier: EE:54:31:C0:5F:0B:E3:8D:07:29:8C:D0:53:AA:C3:10:09:55:E0:1F Authority key identifier: 2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85 Certificate issuer: /CN=2e210bd2c7cbef20f224a47b32a157318888ec85 Certificate serial: 019AA5DBA352F742002C58150F3B747A795C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft Manifest number: 02D8 Signing time: Fri 21 Nov 2025 10:00:26 +0000 Manifest this update: Fri 21 Nov 2025 10:00:26 +0000 Manifest next update: Sat 22 Nov 2025 10:00:26 +0000 Files and hashes: 1: LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl (hash: FFBir3SYYNlNrKkxMoNs/jR/zIW1t/esUV14AMe2mlU=) 2: gH-hksMyjADdSnLZQyC57cd6lrA.roa (hash: hDYDdACy3gd+GmXhVoi6Clu3jpw70AyqVE9omGwk5CE=) 3: w9h083wG9ItaPjH-_63uYE6KznA.roa (hash: V3Tb51WvY6giQH0ElaZuODezIpP/3ZCphM9ap9vb4L0=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:db:a3:52:f7:42:00:2c:58:15:0f:3b:74:7a:79:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e210bd2c7cbef20f224a47b32a157318888ec85 Validity Not Before: Nov 21 10:00:26 2025 GMT Not After : Nov 22 10:00:26 2025 GMT Subject: CN=ee5431c05f0be38d07298cd053aac3100955e01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:ec:a0:fd:b3:ca:94:60:45:5d:c4:2d:1d: d2:10:83:1a:9a:84:d1:73:b8:9c:b3:4a:bf:2a:40: 22:9d:8a:7a:84:35:47:29:0a:71:75:cc:c6:a5:f4: dc:92:0d:06:40:5b:3e:7d:b5:09:fa:9f:22:5f:bf: ed:d1:20:32:4e:85:7b:9a:b9:ef:21:9f:79:02:cb: e4:d3:e3:3e:74:d5:4a:e7:e7:78:fc:b0:e6:36:d2: b6:74:79:55:d6:d4:99:b1:6a:bb:13:e6:a2:0d:bf: 38:ca:e4:c4:e6:11:40:51:7c:c5:43:b0:e8:18:c4: e7:08:8c:74:fd:3e:e8:78:0a:dd:09:ae:c0:5a:45: 6e:a6:40:dc:82:42:b1:68:84:e8:da:01:35:fa:ba: 49:60:bb:74:97:4b:7d:c7:ee:0d:6d:c7:d2:47:0a: 24:e1:a6:eb:9b:0e:6e:2f:25:e1:b8:60:43:ec:60: dd:88:0e:c8:28:fb:95:44:f4:22:32:92:db:29:05: 63:64:ef:00:5c:8b:e1:73:b7:92:80:ab:7e:9f:96: 4f:73:f0:0d:d2:ac:88:3a:1c:d9:8d:16:c8:36:a2: 9e:fe:1b:e2:6e:d2:f9:b7:33:86:d2:f9:87:e3:45: 95:ff:65:ca:09:2a:7a:a6:9f:85:9e:53:1a:06:9d: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:31:C0:5F:0B:E3:8D:07:29:8C:D0:53:AA:C3:10:09:55:E0:1F X509v3 Authority Key Identifier: keyid:2E:21:0B:D2:C7:CB:EF:20:F2:24:A4:7B:32:A1:57:31:88:88:EC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiEL0sfL7yDyJKR7MqFXMYiI7IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0a4fdc-a869-43b7-bbd0-bf90d0151b53/1/LiEL0sfL7yDyJKR7MqFXMYiI7IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:19:83:b0:1a:77:05:8e:09:49:b1:d3:dd:fe:9a:cb:3a:0e: 03:23:d5:8e:ec:d5:da:e0:1c:9f:c0:07:38:a1:2b:fb:c3:9f: 8b:75:4a:7a:45:b0:49:3e:5c:67:84:2e:bc:16:38:bc:aa:1d: 64:59:d9:18:ff:4b:9b:13:14:df:5e:6a:e6:b0:0c:a9:f7:8a: 8c:b7:59:b6:2c:ad:72:b3:74:8d:38:e4:ba:91:b2:a4:d4:da: e6:8b:dd:5b:ec:e4:ad:b7:cd:ae:15:66:b7:ad:32:a9:6a:e2: d7:7e:2b:3e:28:b4:4c:1d:55:d2:36:96:e2:cd:a3:d8:b5:9a: eb:8d:5e:f0:64:ea:e4:42:07:6c:99:6f:7c:87:97:34:ad:f0: 68:2f:a5:96:96:03:6c:4b:b9:c7:35:fd:7b:c5:d1:89:c8:fb: 1e:97:f3:f1:35:16:27:53:b1:86:55:0c:7f:2c:47:6c:0e:68: e1:3c:e3:93:ef:b4:2f:ce:0d:e0:8b:7e:d4:62:3b:6b:bc:99: 56:9b:89:21:6d:83:22:8e:f7:73:87:24:a1:7a:41:28:8e:da: 0b:75:bb:a7:df:6e:40:88:99:30:f2:26:cd:eb:27:42:c3:0a: 15:f4:00:dd:e4:ba:27:71:73:07:a7:26:98:58:43:56:4d:8a: f4:5d:cb:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZql26NS90IALFgVDzt0enlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjEwYmQyYzdjYmVmMjBmMjI0YTQ3YjMyYTE1NzMxODg4 OGVjODUwHhcNMjUxMTIxMTAwMDI2WhcNMjUxMTIyMTAwMDI2WjAzMTEwLwYDVQQD EyhlZTU0MzFjMDVmMGJlMzhkMDcyOThjZDA1M2FhYzMxMDA5NTVlMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwonsoP2zypRgRV3ELR3SEIMamoTR c7ics0q/KkAinYp6hDVHKQpxdczGpfTckg0GQFs+fbUJ+p8iX7/t0SAyToV7mrnv IZ95Asvk0+M+dNVK5+d4/LDmNtK2dHlV1tSZsWq7E+aiDb84yuTE5hFAUXzFQ7Do GMTnCIx0/T7oeArdCa7AWkVupkDcgkKxaITo2gE1+rpJYLt0l0t9x+4NbcfSRwok 4abrmw5uLyXhuGBD7GDdiA7IKPuVRPQiMpLbKQVjZO8AXIvhc7eSgKt+n5ZPc/AN 0qyIOhzZjRbINqKe/hvibtL5tzOG0vmH40WV/2XKCSp6pp+FnlMaBp222wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5UMcBfC+ONBymM0FOqwxAJVeAfMB8GA1UdIwQY MBaAFC4hC9LHy+8g8iSkezKhVzGIiOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAt YmY5MGQwMTUxYjUzLzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8wYTRmZGMtYTg2OS00M2I3LWJiZDAtYmY5MGQwMTUxYjUz LzEvTGlFTDBzZkw3eUR5SktSN01xRlhNWWlJN0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRmDsBp3 BY4JSbHT3f6ayzoOAyPVjuzV2uAcn8AHOKEr+8Ofi3VKekWwST5cZ4QuvBY4vKod ZFnZGP9LmxMU315q5rAMqfeKjLdZtiytcrN0jTjkupGypNTa5ovdW+zkrbfNrhVm t60yqWri134rPii0TB1V0jaW4s2j2LWa641e8GTq5EIHbJlvfIeXNK3waC+llpYD bEu5xzX9e8XRicj7Hpfz8TUWJ1OxhlUMfyxHbA5o4Tzjk++0L84N4It+1GI7a7yZ VpuJIW2DIo73c4ckoXpBKI7aC3W7p99uQIiZMPImzesnQsMKFfQA3eS6J3FzB6cm mFhDVk2K9F3L1w== -----END CERTIFICATE-----Generated at Sun Dec 14 14:37:38 2025 by rpki-client